3 ms·
The security attack that scares me more than any other is rough men with guns kidnapping me in the middle of the night and then torturing me until I reveal my s
by User23 5y ago
The security attack that scares me more than any other is rough men with guns kidnapping me in the middle of the night and then torturing me until I reveal my security material. While normally torture just results in the victim saying anything to make it stop, in the specific case where the attacker has encrypted material and can test key extraction in real-time torture is highly effective.
- api 5y agoThere’s a canonical term for this: rubber hose cryptography. That’s when you beat someone with a rubber hose until they give you the key. It’s effective against a wide range of algorithms and constructions.
- 3gg 5y agohttps://xkcd.com/538/ https://xkcd.com/538/
- rocqua 5y agoThe technical solution is having very available, very believable lies. Something where you can "reveal" false secrets that decrypt to believable data by your attacker. This is generally hard. Because you gotta know, at the time of being tortured, which fake secret will give believable results.